| Summary: | SELinux is preventing Chrome_ChildThr from read, write access on the file /home/ted/.mozilla/firefox/3q2u98v0.default/storage/temporary/https+++www.facebook.com/asmjs/module15. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ted <yingted> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 23 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl, plautrba |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:91c9d8a0582341f6eef2f3fd82593dba9fa07053466b9dfc763cd1edfe66ee99;VARIANT_ID=workstation; | ||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-08-31 10:52:55 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
The alert told you what to do. ***** Plugin restorecon (57.3 confidence) suggests ************************ If you want to fix the label. /home/ted/.mozilla/firefox/3q2u98v0.default/storage/temporary/https+++www.facebook.com/asmjs/module15 default label should be mozilla_home_t. Then you can run restorecon. Do # /sbin/restorecon -v /home/ted/.mozilla/firefox/3q2u98v0.default/storage/temporary/https+++www.facebook.com/asmjs/module15 I would just do a restorecon -R -v ~ |
Description of problem: SELinux is preventing Chrome_ChildThr from read, write access on the file /home/ted/.mozilla/firefox/3q2u98v0.default/storage/temporary/https+++www.facebook.com/asmjs/module15. ***** Plugin restorecon (57.3 confidence) suggests ************************ If you want to fix the label. /home/ted/.mozilla/firefox/3q2u98v0.default/storage/temporary/https+++www.facebook.com/asmjs/module15 default label should be mozilla_home_t. Then you can run restorecon. Do # /sbin/restorecon -v /home/ted/.mozilla/firefox/3q2u98v0.default/storage/temporary/https+++www.facebook.com/asmjs/module15 ***** Plugin mozplugger (43.1 confidence) suggests ************************ If you want to use the plugin package Then you must turn off SELinux controls on the Firefox plugins. Do # setsebool -P unconfined_mozilla_plugin_transition 0 ***** Plugin catchall (1.06 confidence) suggests ************************** If you believe that Chrome_ChildThr should be allowed read write access on the module15 file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'Chrome_ChildThr' --raw | audit2allow -M my-ChromeChildThr # semodule -X 300 -i my-ChromeChildThr.pp Additional Information: Source Context unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c 0.c1023 Target Context system_u:object_r:user_home_dir_t:s0 Target Objects /home/ted/.mozilla/firefox/3q2u98v0.default/storag e/temporary/https+++www.facebook.com/asmjs/module1 5 [ file ] Source Chrome_ChildThr Source Path Chrome_ChildThr Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages Policy RPM <Unknown> Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.6.7-200.fc23.x86_64 #1 SMP Wed Aug 17 14:24:53 UTC 2016 x86_64 x86_64 Alert Count 1 First Seen 2016-08-30 21:52:00 EDT Last Seen 2016-08-30 21:52:00 EDT Local ID 7b9f3d10-4b57-4ba4-b035-92e0a3e1262a Raw Audit Messages type=AVC msg=audit(1472608320.125:278): avc: denied { read write } for pid=4416 comm="Chrome_ChildThr" path="/home/ted/.mozilla/firefox/3q2u98v0.default/storage/temporary/https+++www.facebook.com/asmjs/module15" dev="sda8" ino=6439827 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=0 Hash: Chrome_ChildThr,mozilla_plugin_t,user_home_dir_t,file,read,write Additional info: reporter: libreport-2.6.4 hashmarkername: setroubleshoot kernel: 4.6.7-200.fc23.x86_64 type: libreport